A new ransomware variant dubbed “Crux” was detected by Huntress researchers in three attacks this month, with the group favoring RDP for initial access and legitimate processes to make it more difficult to detect it. The group also claims to be part of the BlackByte RaaS crew, though Huntress couldn’t validate the claim.
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2025/07/new-crux-ransomware-emerges-in-three-attacks-this-month/
